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1 Introduction 

In game theory, strategy for a player is defined as "a set of rules that describe 
exactly how (...) [a] player should choose, depending on how the [other] players 
have chosen at earlier moves" [IIJ. Notice that this definition of strategies is 
static, and presumably constructed before the game is actually played. 

For example, consider chess. According to Zermelo's well-known theorem, 
chess is determined |22j . Then, why would you play chess if you know you will 
lose (or won't win) the game? Clearly, if we have logical omniscience (which we 
don't), then it is pointless for the player, who is going to lose, to even start playing 
the game as she knows the outcome already. If we are not logical omniscient, and 
have only a limited amount of computational power and memory (which we do), 
then chess is only a perfect information game for God. Therefore, there seems to 
be a problem. The static, pre-determined notion of strategies falls short analyzing 
perfect information games. Because, we, people, do not strategize as such even 
in perfect information games - largely because we are not logically omniscient, 
and we have limited memory, and computational and deductive power. 

While people play games, they observe, learn, recollect and update their 
strategies during the game as well as adopting deontological strategies and goals 
before the game. Players update and revise their strategies, for instance, when 
their opponent makes an unexpected or irrational move. Similarly, sometimes 
external factors may force the players not to make some certain moves. For in- 
stance, assume that you are playing a video game by using a gamepad or a 
keyboard, and in the middle of the game, one of the buttons on the gamepad 
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Fig. 1. Centipede game 



brakes. Hence, from that moment on, you will not be able to make some moves 
in the game that are controlled by that button on the gamepad. This is most 
certainly not part of your strategy. Therefore, you will need to revise your strat- 
egy in such a way that some moves will be excluded from your strategy from 
that moment on. However, for your opponent, that is not the case as she can 
still make all the moves available to her. 

Moreover, in some cases, assumptions about the game or the players may fail 
as well. For instance, consider the centipede game between two players PI and 
P2 (Figure [T|). Under the assumption of common rationality, the usual backward 
induction scheme produces the solution that PI needs to make a d move at sq. 
What happens then, if PI is prohibited or prevented from making d move at 
So and onwards right after the beginning of the game (or similarly, if the key 
on the gamepad that is used to make a d move is broken)? It means that from 
a behavioral perspective, the assumption of common rationality is violated and 
P2 may need to update her strategy during the game based on what she has 
observed. There can be many reasons why PI may make such a move. The move 
d might have been prohibited for PI right after the game has started, or it may 
be a taboo for that specific player to make that move, or it may have been simply 
forbidden or restricted by an external factor (nature, God etc.). 

In this paper, we focus on what we call move updates where some moves 
become unavailable during the game. Clearly, there can be considered many 
other forms of updates, revisions and restrictions that can happen during the 
game play. For instance, some states may become unavailable in the midst of 
the game for some players. Moreover, manipulation games where a third party 
or God/nature affects the outcome of the game are also examples of such games 
where dynamic strategy analysis is much needed. 

Our goal here is to present a formal framework for move based strategy 
restrictions by extending strategy logic (henceforth, SL) which was introduced 
by Ramanujam and Simon [19] . The rest of the paper is structured as follows. 
Section [5] provides a short reminder of SL. In Section [31 the framework of SL 
is extended with strategic move restrictions, and completeness of the resulting 
logic is shown. Then, we investigate some decision theoretical problems and give 
a complexity bound for the model checking problem in SL - which was an open 
problem so far. Finally, we conclude by placing RSL in the context of related 
work, followed by a conclusion and ideas for future research. The Appendix 
contains proofs of all propositions and theorems stated in Section [31 

2 Strategy logic 

In this section, we give a short overview of the strategy logic |12|19j . The focus 
is on games played between two players given by the set N = {1, 2}, and a single 
set of moves E for both. Let T = (5, =>, sq) be a tree rooted at Sq £ S, on the 
set of vertices S. A partial function =>: 5 x Z" — )► S' specifies the labeled edges of 
such a tree where labels represent the moves at the states. The extensive form 
game tree, then, is a pair T = (T, A) where T is a tree as defined before, and 



A : S* — i> A^ specifies whose turn it is at each state. A strategy /i* for a piayer 
i S iV is a function /i* : 5* ^ Z" where S^ = {s <E S : \{s) = i}. For player i 
and strategy /i*, the strategy tree T^ ~ (5^, =>^, sq, A^) is the least subtree of T 
satisfying the following two natural conditions: 

1. So G S^; 

2. For any s £ 5^, if A(s) = i, then there exists a unique s' G S'p and action 
a such that s =^^ s'. Otherwise, if A(s) =^ i, then for all s' with s => s' for 
some a, we have s =4^^ s' . 

In other words, in the strategy tree, the root is included, and for the states 
that belong to the strategizing player, a unique move is assigned to the player, 
and for the other player, all possible moves are considered. Notice that, in SL, 
strategies return unique moves. Nevertheless, we would still have a tree even if 
the strategies are set-valued. 

The most basic constructions in SL arc strategy specifications. First, for a 
given countable set X, a set of basic formulas BF{X) is defined as follows, for 
a€S: 

BF{X) ■.= x eX \^ip\ip ^ip\ (a)ip 

Let P* be a countable set of atomic observables for player i, with P ~ P^ U P^. 
The syntax of strategy specifications is given as follows for (p G BF{P^): 

StrafiP"-) := [ip -^ af | cri + 0-2 I en ■ 0-2 

The specification [(^ — ;■ a]* at player i's position stands for "play a whenever ip 
holds" . The specification ci + 0-2 means that the strategy of the player conforms 
to the specification ci or CT2 and cti • CT2 means that the strategy of the player 
conforms to the specifications ci and (72 • 

Let M = (T, V) where T ~ {S, =^, sq, A) is an extensive form game tree as 
defined before, and V^ : S* — > 2-'^ is a valuation function for the set of preposi- 
tional variables P. The truth of a formula (p G BF{P) is given as usual for the 
prepositional. Boolean and modal formulas. 

The notion "strategy /i conforms to specification a for player i at state s" 
(notation /x, s ^^ a) is defined as follows, where out^(s) denotes the unique 
outgoing edge at s with respect to /i. 

fi, s \^i [ip ^f a]^ iff M, s \^ p implies out^(s) — a 
jjL, s^i (Ti+ 0-2 ffi M. s hi ^1 or M) s hi 0-2 
11, s^iCFi- a-i iff /^, a ^^ cti and [i, s \=i a-i 

Now, based on the strategy specifications, the syntax of the strategy logic 
SL is given as follows: 

p I -193 I (pi A (^2 I (a)<p I {a)i : a \ a ^i ^ 

ioT peP,ae U,a e Strat'{P'), and tp G BF{P'). We read {a)i : a as "at the 
current state the strategy specification a for player i suggests that the move a 



can be played" . Subsequently, we read a -^i ip as "following strategy a player i 
can ensure "0" . The other connectives and modalities are defined as usual. 

We now define the set of available moves at a state s as moves{s) :— {a G 
S : 3s' £ S with s => s'}. Then, based on moves, we inductively construct the 
set of enabled moves at state s in strategy a as follows. 
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- (o-l + 0-2)(s) = CTi(s) U CT2(s) 

- (c^l-cr2)(s) =cri(s)ncr2(s) 
The truth definition for the strategy formulas are as follows: 

M, s \= {a)ip iff 3s such that s ==> s' and M, s' \= ip 

M,s ^ {a)i :a iff a G a{s) 

M,s \= a ~^i ^p iff Vs' such that s =>* s' in Tslcr, 

we have M, s' ^ ip A (turrit — > enabled^) 

where a{s) is as before, and =^* denotes the refiexive transitive closure of 
Furthermore, Tg is the tree that consists of the unique path from the root (sq) 
to s and the subtree rooted at s, and Ts\a is the least subtree of T^ that contains 
a unique path from sq to s and from s onwards, for each player i node, all 
the moves enabled by a, and for each node of the opponent player, all possible 
moves . The proposition turn^ denotes that it is i's turn to play. Finally, define 
enabledo- = \/aesi(^)^ ^ i'^)''- '■ '^)- ^^w, we give the axioms of SL. 

- All the substitutional instances of the tautologies of propositional calculus 

- [a]{^ ^ ^) ^ i[a]^ ^ [aW 

- {a)(p -> [a]ip 

- {a)T -> {[tp -> aY : a)i for all a e 17 

- [turrii Alp A{[ip ^ a]*)i : a)] -^ (a)T 

- turrii A {[ijj — )► a]')i : c o -^ip for all a ^ c 

- (cr + a')i : a ^-> (cr : a)i V {a' : a)i 

- {a ■ a')i : a <->■ (cr ; a)i A (cr' : a)i 

- (7 -^iip ^ [tp A inv°"(a, ip) A inv1j(-0) A enabled^] 

Here, inv^(a,'(/') = (turn^ A {a)i : a) — > [a]{a -^i ip) which expresses the fact 
that after an a move by i which conforms to cr, the statement a ~-^i ip continues 
to hold, and inv'^^^ip) = turn^ — > 0(ct -wj ip) states that after any move of —i, 
a ~^i Ip continues to hold. Here, Q)(p = \J aGi:{'^)f ^^'^ ®f = ~' O ""/'• 

Now, we discuss the inference rules that SL employs: modus ponens and 
generalization for [a] for each a £ S. The induction rule is a bit more complex: 
From the formulas (p A (turrii A (cr),j : a) -^ [al^fi, f A turn_i — > ©1^9, and ip — >■ 
■j/^Aenabledo- derive (/? — ^ cr ^~»i ip. The axiom system of SL is sound and complete 
with respect to the given semantics [19]. 



3 Restricted strategy logic 

3.1 Basics 

Let us now extend SL to restricted strategy logic, henceforth RSL, by aUowing 
move restrictions during the game. Recall that our motivation can be illustrated 
with the example of a gamepad/keyboard which gets broken during the game 
play disallowing the player to make some certain moves from that moment on. 
We denote the move restriction by [a\aY for a strategy specification <t, and 
move a for player i. Informally, after the move restriction of cr by a, player i will 
not be able to make an a move. We incorporate restrictions in RSL at the level of 
strategy specifications. In SL, recall that strategies are functions. Therefore, they 
only produce one move per state. However, our dynamic take in strategies cover 
more general cases where strategies can offer a set of moves to the player. Thus, 
in RSL, we define strategy /i* as ^^ : S^ —> 2^. By outr^i(s) we will denote 
the set of moves returned by /i' at s. Then, the extended syntax of strategy 
specifications for player i is given as follows. 

Straf{P') := [^ ^ a]* I cr + cr I cr • cr I [alaf 

Notice that the restrictions affect only the player who gets a move restriction. 
In other words, if a is prohibited to player i, it does not mean that some other 
player j cannot make an a move. In other words, if my gamepad/keyboard is 
broken, it doesn't mean that yours is broken as well. 

Once a move is restricted at a state, we will prone the strategy tree removing 
the prohibited move from that state on. Therefore, given /j.* : S** — > 2^, we define 
the updated strategy relation /xMa : 5* -^ 2^~^°-\ We are now ready to define 
confirmation of restricted specifications to strategies. Note that we skip the cases 
for • and + as they are exactly the same. 

fi, s \^i [(p ^)- aY iff A'/, s \= (p implies a G outrp(s) 
IJ,^,s ^i [a\aY iff a ^ outr^i(s) and ^la,s \^i a 

In the sequel, we omit the superscript that indicates the agents, thus, we write 
S for S**, and cr!a for [a\aY when it is obvious. Given a strategy /i and its 
strategy tree T^ = (5*^,^^,50:^/^): we define the restricted strategy structure 
Tf^\a with respect to an action a. Once we removed the restricted moves, the 
updated structure may not be a tree (it may be a forest). For this reason, we 
take {^\a, s) as the connected component of T^iq that includes s. Therefore, 
for a fixed strategy, restrictions may yield different restricted strategy trees at 
different states. This is perfectly fine for our intuition, because the state of the 
game where the restriction is made is important. In other words, it matters where 
may gamepad is broken during the game play. Now, for player i and strategy /x* 
and move a, the restricted strategy tree T^ia — {Sfj_\a, =>^!a, s', A^iq) is the least 
subtree of T satisfying the following two conditions: 

1. s' e Sfj,\a; 



2. For any s g Sn\a, if A(s) = i, then for each aetion b =/= a £ ii\a{s), there exists 
a unique t G S^\a such that s =i>p!a i- Otherwise, if A(s) ^ i, then for all t 
with s ^ t for b ^ a, we have s =>^!a i- 

Note that we introduce such conditions so that an RSL model can easily be 
considered as a submodel of a SL model with some additional assumptions. We 
can now make some further observations. By the abuse of the notation, we will 
use -f-J- to denote the equivalence of strategy specifications with respect to the 
conformation relation. 

Proposition 1. For any strategy ^, state s, specification a, and formula ip, 

IJ,s^ [[il; -^ a]la]. 

Proposition 2. For strategy specifications a and a' , and move a, {a ■ a')la O- 
(cr!a) • (cr'!a) and (a + a'y.a o (cr!a) + (cr'!a). 

Restrictions stabilize immediately. For n > 1, we use notation al^a to denote 
n > 1-consecutive restrictions of a by move a. Similarly, we put fiV^a for the 
corresponding strategy tree ^. 

Proposition 3. For arbitrary strategy specification a, move a and state s, 
(cr!a)!a o a\a. Moreover, we have cr!"a ■f-!> ala. 

Since restrictions are local and operate by elimination, the order of the re- 
strictions does not matter. 

Proposition 4. For any moves a and b, (cr!a)!6 o (cr!&)!a. 



3.2 A Case Study: The Centipede Game 

Let us consider the centipede game (see Figure [T|), and see how RSL can for- 
malize it when a restricted strategy specification can change the game after an 
unexpected (or even irrational) move. Let us call the players PI and P2. The set 
of actions in the centipede game is 17 = {d, a} where d, a mean that the player 
moves down or across, respectively. Utilities for individual players are indicated 
by a tuple {x, y) where x is the utility for PI, and y is the utility for P2. For the 
sake of generality, we will not impose any further conditions on the strategies. 

In a recent work, Artemov approached the centipede game from a rationality 
and epistemology based point of view [T] . Now, similar to his approach, we will 
use symbols ri and Y2 to denote the propositions "PI is rational" and "P2 is 
rational" , respectively. Let us now construct rational strategies ji and v for PI 
and P2 respectively following the backward induction scheme. At S4, PI makes 
a d move, if she is rational. Therefore, we have /x, S4 \= [ri — >■ d]^^ . However, 
at S3, P2 would be aware of Pi's possible move at S4 and the fact that PI 
is rational as well, thus makes a d move if she herself is rational. So, we have 
v,sz \= [{y2 a ((a)ri V (d}ri)) — )► d]^^. Following the same strategy, we obtain 
the following. 
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^l, S2 h [n A ((a)(r2 A ((a)ri V (d)ri) V (d)(r2 A ((a)ri V (d)ri))) ~> d]^i 

i/,si h[r2A((a)(riA((a)(r2A((a)riV(d)ri)V(d)(r2A((a)riV(d)ri))))(d)(riA 
((a)(r2 A ((a)ri V (d)ri) V (d)(r2 A ((a)ri V (d)ri))))) ^ d]^^ 

/^,so h [(ri A ((a)(r2 A ((a)(ri A ((a)(r2 A ((a)ri V (d)ri) V (d)(r2 A ((a)ri V 
(d)ri))))(d)(ri A ((a)(r2 A ((a)ri V (d)ri) V (d)(r2 A ((a)ri V (d)ri)))))) V (d)(r2 A 
((a)(ri A ((a)(r2 A ((a)ri V (d)ri) V (d)(r2 A ((a)ri V (d)ri))))(d)(ri A ((a)(r2 A 
((a)ri V (d)ri) V (d)(r2 A {{a)r, V (d)ri))))))) -^ d]^i 

Let ()ip := (a)(^ V {d)ip. Then, we have the following statements. 

H, S4 h [ri -^ d]^i 
i^,S3h[i-2A0ri^d]^2 

Ai,S2 h[i-iA0(r2A0ri)^d]^i 

i., si h [1-2 A 0(ri A 0(r2 A Ori)) ^ df^ 

fi, so h [n A 0(r2 A 0(ri A 0(r2 A Ori))) ^ d]^^ 

Therefore, backward inductively, under the assumption of common rational- 
ity, we observe that PI should make a d move at sq. Furthermore, this can be 
generalized to many other games. 

Theorem 1. Assuming common rationality in RSL framework, backward in- 
duction scheme produces a unique solution in games with ordinal pay-offs. 

Argument for the proof of the theorem is quite straight-forward. Even if the 
strategies may be set valued, and hence return a set of moves per state, the 
assumption of common rationality forces the player to choose the move which 
returns the highest pay-off. Since this fact is known among players, by induction, 
we can show that the solution is unique. 

Let us follow the backward induction scheme again with the updated game 
tree given above. Notice that the specification [ri — > d]^^ docs not conform with 
lild (as fild, s ^ [[ri — > d]^^!d]^^ for all s0 Therefore, after the move restriction 
rational move for PI is not admissible for her from that point on. Thus, /i!d 
conforms to those specifications that implies an a move. Thus, fild,S4 \= [T -^ 
a]^^ • -i[ri — )■ d]^^. Therefore, at S3, being rational, P2 choses the move with the 
highest pay-off, and makes an a move. Thus, z/, S3 ^ r2 A (0~'[i"i -^ d]) — >• a]^^. 



^ We slightly abuse the formal language here. For a specification a, we put fJ.,s\= -kt 
if it is not the case that fj,,s \= a. 



Similarly, at si, we have v, si |=: r2 A (0-'[i"i -> rf] A 0(r2 A {()^[vi -^ d]))) 



a 



Finally, at the root, we have /ild, sq 1= [T — > a] . Thus, in the restricted 
centipede game, clearly, PI has to make an a move. 

Even if it is not in the scope of this paper, this example also shows that 
we can view rationality as a set of restrictions. Namely, some restrictions forces 
the players to play irrationally, while some restrictions allow them to play ratio- 
nally. RSL, in this respect, gives a framework where both rational and irrational 
strategies can be analyzed. 



3.3 Axiomatization, Completeness, and Complexity 

Before discussing the axiomatization of RSL, we note that the set of available 
moves moves is defined as previously. Then, we define the set of enabled moves 
for the move restriction operator as ([(T!a]')(s) = cr(s) — {a}. Namely, if the move 
a is not allowed any more, it should not be enabled. 

We now give the syntax of RSL, which is the same as that of SL. 

p I {a)i : a \ ^ip \ ipi A ip2 \ {a)ip \ a -^i ip 

The semantics and the truth definitions of the formulas are defined as earlier 
with the exception of strategy specifications for restrictions (cf. Section 2). The 
axiom system of RSL consists of the axioms and rules of SL together with the 
following additional axiom for the added specification construct. 

— {<7la)i : c ^ turni A -'((cr)i : a) A {a)i : c 

The soundness of the given axiom is straightforward and hence skipped. The 
new specification we introduced does not bring along an extra derivation rule 
since the new operator is at the level of specifications, not the formulas. 

Now, we observe that restricted moves are not enabled. We state it as a 
theorem with an immediate proof. 

Theorem 2. (cr!a)j : a O _L. 

As expected, the system RSL is complete. 

Theorem 3. RSL is complete with respect to the given semantics. 

However, the decidability of RSL and SL are not immediate. To the best of 
our knowledge, SL has not yet been proved to be decidable (or undecidable) . 
Here, we show an upper bound for the model checking problem for both logics. 

Now, we discuss a reduction of SL to (multi-modal) Computational Tree 
Logic CTL*. We refer the readers who are not familiar with CTL* to [9110] . 
First, we discuss how to construct a CTL* model based on a given SL/RSL 
model, then describe a translation from SL to CTL*. 

Let us take a strategy model M — {T,V) where T = {S,^,sq,X). Notice 
that the function ^ was defined from S x S to S. We can redefine it by currying. 
Given ^■. S x U -^ S , we can define the transition =>: 5 — ?• 5 for each move a. 



Therefore, we can curry => to get =>= Uaei: ^- ^'^ '^^'^ think of M as a pomted 
multi-modal CTL* tree model M* = (S*, sq, {^jaei;, ^) that has next time 
modalities for each action. In this case, corresponding to each binary relation 
=>, we will have a dynamic next-time modality X^ which quantifies over the 
sub-path on the same branch (note that state formulas are also path formulas 
[To]). For the reflexive-transitive closure of =>, we will use D for all accessible 
future times in the same branch. Before giving the translation of SL specifications 
and formulas into CTL*, let us introduce some special propositions. We label 
the states that are returned by a strategy n with the proposition strategy , 
stipulating that strategy holds only at those points. Notice that given two 
points in the domain of fj,, there is a unique path between these two (which 
satisfies strategy ). Moreover, we use turn^ as a proposition that denotes that 
it is i's turn to play, i.e. s \= turn^ iff s e 5*. 

We now give two translations. First, tr translates strategy specifications to 
CTL* formulas while the second Tr translates SL formulas to CTL* formulas. 
Given a strategy /i, conformation to /i is translated as follows. 

- tr([V' ^ aY) ^ Tr(Vj) ^ E(strategy^ A X^T) 

- tr(cri + 0-2) = tr(cri) V tr(cr2) 

- tr(cri • CT2) = tr(cri) A tr(cr2) 

Notice that in the first case, the translation makes use of the formula trans- 
lation Tr for formula ip as defined below. Assuming the correctness of Tr (which 
we show in Theorem [5]), correctness of the translation tr is straightforward. 

Theorem 4. Let fi be a strategy and a a strategy specification in SL, and let /i* 
he the corresponding (suh)tree in a CTL* model. Then, fi, s \^ a ijf fi* , s |= tr{a). 

Here follows the translation Tr of formulas from SL to CTL* skipping the 
Boolean cases. Note that the translation is very similar to the Kripke semantics 
for Propositional Dynamic Logic where for each action a, a relation Ra and a 
modality (a) associated with Ra are introduced. 

- Tr((a)v?) = XaTr{^) 

- Tr(((T), : c) = XcT for c G cr(s) 

- Tr((cr), :c) = ± if c ^ cr(s) 

- Tr(cr -^i ip) — En(strategy^ A (Tr(V') A (turn^ -^ enabledg-))) 

Now, the atom enabled^ is true at a state s in CTL* if and only if for at least 
one a € S we have X^T and a £ cr(s). Finally, the CTL* correspondence of a{s) 
to the set of enabled moves at s by the strategy specification a is defined exactly 
as before with one small arrangement in the definition of admissible moves at a 
given state s, namely moves{s) = {a : s \=^ctl* XaT}. As an example, consider 
the translation of the proposition out^ — a. Recall that it means that a is the 
unique outgoing edge according to strategy ^ at the state where the formula 
is interpreted. Therefore, there is a branch that is followed by strategy /i, and 
at that branch, at the current state, a is an admissible move. This corresponds 
to the translation E(strategy A XaT). The following theorem summarizes our 
efforts here. 



Theorem 5. Let M be a SL model and let M* be its CTL* correspondent. 
Then, M, s \= ip iff M* , s \= Tr{ip) for any state s E S . 

Note that the translation we suggest is model-dependent. For example, the 
predicate strategy , depends on the strategy /i, thus the model. For this reason, 
the suggested translation is not entirely syntactic and does not give us an imme- 
diate decidability result (using the fact that CTL* is decidable). However, model 
checking problem for CTL* is PSPACE-complete [9]. Therefore, we have an up- 
per bound for the complexity of the model checking problem for SL. We next 
observe that the model checking problem for both SL and RSL are in PSPACE. 

Theorem 6. The model checking problem for SL is in PSPACE. 

Corollary 1. The model checking problem for RSL is in PSPACE. 

4 Related Work and Conclusion 

From a logical point of view, the idea of treating strategies as the "unsung heroes 
of games" can be traced back to van Benthem ^4T5] . In line with this program, 
Ramanujam, Simon, and Paul |15I18I19|^ have initiated a study within game 
theory and dynamic logic by taking strategies as the focus of concern and treating 
them as the primitives of games. They discuss strategies as a way of reasoning 
within and about games, and investigate how games and strategies behave under 
some further assumptions. 

The game-theoretical approach to the centipede game was initiated by Rosen- 
thal [H], which was followed by several solution methods |2I13| . More recently, 
the role of rationality in its solution methods has been discussed 13 161 and ex- 
tended to some other cases [TS].The role knowledge as opposed to beliefs has 
been discussed in similar contexts by Artemov [1]. Moreover, based on experi- 
mental work, Ghosh, Meijering and Verbrugge aim to observe how humans reason 
strategically ill) . They consider simple centipede- like games from the cognitive 
point of view, and use strategy logic to formalize their findings. 

This work is built on the aforementioned studies, and introduces a dynamic 
twist in formalizing strategies in games. What we suggest is a formal framework 
where restrictions in strategies are allowed during the game. We propose a new 
logic, called restricted strategy logic (RSL), to express strategy restrictions. We 
show its completeness and discuss model checking issues. Along the way, we 
also discuss model checking of SL, which has not been done so far (to the best 
of our knowledge). We claim that RSL presents a succinct way to represent 
strategy revisions. One direction for future research concerns the question on 
how RSL can be connected to the switching strategy frameworks. Additionally, 
one could come up with an restriction methodology where players change their 
rationality assumption. Note that, within the framework of RSL, different types 
of rationality (utilitiarian, deontological etc) can be seen as a different set of 
restrictions. For instance, a player can initially commit herself to a maxmin 
type of strategy and then change her commitment to a max max type of strategy. 



Therefore, such changes can be represented from switching from restriction set 
A to restriction set A' , for instance. In short, different types of rationahty can 
cause different revisions in players' strategies. We leave such analysis to future 
work. 

Moreover, note that the way strategy restrictions work, and its completeness 
proof resemble public announcement logic 18117] . In the case of RSL, the move 
restriction can be seen as a prohibitive negative announcement, corresponding 
to an elimination of moves that agree with the prohibition. 

In conclusion, we believe that RSL presents a concise and natural framework 
for dynamic strategizing in games, and it can be extended in several thought- 
provoking ways. 
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Appendix: Proofs 

Proof (Proposition\^. Consider the first case. 

/i, s 1= (ct • cr')\a iff a ^ outrp(s) and ^\a, s \= a ■ a' 

iff a ^ outr^(s) and iJila, s\= a and iJila, s ^ a' 
iff a ^ outrp(s) and iJila, s\= a), and 

a ^ outrp(s) and ^!a, s \^ a') 
iff /i, s 1= ala and /i, s |= a' la 

The remaining cases are similar. D 

Proof (Proposition[3^ . We start with considering the cases where the restrictions 
are apphed consecutively twice. We use Proposition 2. 

H,s \= {a\a)\a iff a ^ outr^i(s) and ^\a, s \= ala 

iff a ^ outr^(s) and (outp(s) 7^ a and {^la)la,s [= a) 

iff a ^ outrp(s) and fila, s |= cr 

iff /x, s 1= ala 



Now, we generalize to tlie case for n. The proof is by induction on n. The 
case for n = 1 is trivial and the case for n = 2 was presented above. Assume 
now that n>2 and the claim holds for every integer less than or equal to n. We 



now show it for n + 1. 






^, s 1= cr!"a iff 

^,sh(CT!""^a)!a iff 

iff 

iff 


a ^ outrp(s) and ^!a, s |= a\"~^a 
a ^ outr^(s) and ^!a, s |= ct!" 


induction hyp. 
by definition 

D 



Proof (PropositionW^ . First, notice that for a strategy /i and moves a, 6, we have 
{(x\a)\h = {ij}.h)\a by definition. Now, let us consider strategy specification a with 
moves a and b. 

/Lt, s ^ {a\a)\h iff b ^ outr^(s) and /i!6, s [= a\a 

iff b ^ outrp(s) and (a ^ outr^(s) and {iilbyM^s \= a) 

iff 6 ^ outr^(s) and (a ^ outr^(s) and (/i!a)!6, s ^ a) 

iff a ^ outr^(s) and (6 ^ outr^(s) and (/i!a)!&, s \= a) 

iff a ^ outr^(s) and ^\a, s ^ crife 

iff n,s[^{alhy.a 

a 

Proof (Theorem,\^\j. The completeness of RSL is by reduction to SL. Since we 
have one additional strategy specification, we describe an immediate reduction 
for that. 

First notice that an RSL model is a submodel of a suitable SL model. The 
only problem is that, in RSL, strategies are constructed as relations whereas in 
SL, the strategies are functions. Therefore, an RSL strategy can be thought of 
as a union of several SL strategies. Therefore, a RSL game-tree is a tree model 
for a SL model with the suitable union of strategies. Moreover, in RSL, we also 
obtain a game-tree model with relational strategies. 

Now, the reduction of RSL to SL should be rather immediate. Given a formula 
of the form (cr)^ : c where a = a'la for some a, we observe that (by soundness), 
it is equivalent to a formula in the language of SL: turn.; A ^{{(j)i : a) A {a)i : c. 
Similarly, consider the given formula of the form a ~^i f/' where a = a'\a for some 
a. Notice also that, in SL, a ^^^ ip is axiomatically reduced to a formula that uses 
formulas of the form (a)i : a which we have covered just before. Therefore, all 
two different types of formulas that may include restricted strategy specifications 
are reduced to a formula in the language of SL. Since SL is complete already 
[12] . and our translation is truth preserving due to soundness, we conclude that 
RSL is complete. D 

Proof (Theorem^. Let ^i : S ^ S he & strategy and let cr be a strategy speci- 
fication in SL for a fixed player i. For simplicity, we omit the superscripts that 
indicate the player. First, we describe how to obtain a multi-modal CTL* tree /i*, 
and then show that the translation is truth-preserving. As a reminder, in a strat- 
egy tree, we include the root, and for the states that belong to the strategizing 



player, we assign a unique move to the player. In addition, we include all other 
moves that do not belong to the strategizing player. Therefore, a strategy tree 
can be thought of a as branching multi-modal CTL* model. We put w \= turrit 
ii w G S^ and at each w G S**, we have one outgoing edge. For w ^ S*', we have 
all admissible moves /i(w) at v. Then, the CTL* model is constructed as follows. 
Take S as the set of states of the CTL* model /i*. Next, for all moves a & S, we 
have a corresponding accessibility relation Ra in the CTL* model similar to the 
Kripke semantics for propositional dynamic logic. Finally, we keep the valuation 
the same as in the SL model. Now, let us consider the case a — [tp ^ aY: 

^,s \= a iff ^, s [= [ip ^- aY 

iff ^J', s \= ijj implies out^ = a (by definition) 
iff A**, s h Tr('0) implies E(strategy^ A XqT) 

Here we make use of the formula translation Tr whose correctness will be shown 
next. Furthermore, we obtain the last line by the induction hypothesis, and by 
the earlier observation we have made about out^ = a. The remaining cases 
for the translation tr are straightforward inductions on specifications ci + (T2 
and a I ■ a2, and hence left to the reader. Unconventionally, here we make use 
of Theorem [5] in the proof of the above statement just because specifications 
preceed the formulas in SL. D 

Proof (Theorem \^. Take a SL model M and the corresponding multi-modal 
CTL* model M*. We then have the following: 

M, s \= {a)ip iff Els' s.t. s ^ s' and M, s' \^ ip (by definition) 

Els' s.t. s ^ s' and M*,s' |= Tr {ip) (by induction) 
M*,s^ XaTr{ip) (by definition) 

Similarly, consider the SL formula a -^i "0: 

M, s ^ a ~^i i) iff for all s' such that s =^* s' in Ts\a, we have, 

M, s' 1= V' A (turn,; — J> enabledo-) 

(by definition) 
iff for all s' such that s =^* s' in Ts, we have 

M, s' \= strategy g^ /\%}j h (turn; -^ enabledo-) 

(by definition) 
iff for all s' such that s ^* s' in Ts, we have 

M*,s' \= strategy^ A Tr{ip) A (turrij -^ enabled^) 

(by induction) 
iff M*,s 1= En[strategy^ A Tr(V') A (turn^ -^ enabled^.)] 

(as =>* denotes the reflexive and transitive closure 

on the path T^ on the CTL* tree T) 

The last case {a)i : c is very similar. Recall that this formula is true in SL at 
a state s iff c G ct{s). Consider the enabled move c at s, and take a corresponding 
next time modality for c, namely Xc. Moreover, at s, the diamond-like modality 
Xc has to be enabled giving us XcT for c G cr(s). D 



Proof (Theorem \^. In this proof, we will present two different arguments to 
show that the model checking problem for SL is in PSPACE. 

First, we show that the translation Tr: SL — > multi-modal CTL* is polynomial- 
time in terms of the length of the formulas. We will denote the length of a speci- 
fication or a formula by | • |. We will show that |Tr('0)| < |-0|'' for some integer k. 
The cases for Booleans are obvious, hence we skip them. For -0 = {a)ip, consider 
\Tr{{a)(p)\ which is equivalent to |XaTr((y9)| = 1 -|- |Tr((y5)|. By induction hypoth- 
esis, |Tr((/7)| < |i^|' for some integer I. Therefore, 1 + \'Tr{ip)\ < \lp\'' for some 
A; > 1 -I- L Therefore, for ip = {a)ip, we observe |Tr(-;/;)| < |V'|*' for some integer 
k. In a similar fashion, the case for ip = {a)i : c is obvious as |Tr((cr)i : c)\ is 
always constant. The case for ijj = a --~^i ip is also very similar. By induction hy- 
pothesis, we immediately observe that |Tr(CT -^i (p)\ < 11 + \(j ~^i if\^ (counting 
the parantheses as well). Therefore, for some large enough integer k>l,we have 
|Tr(cr -^i ip)\ < \(T -^i ifil''. 

Now, we can consider the translation tr for the strategy specifications. The 
reason why we consider tr after Tr is the fact that former depends on the 
latter. We will now show that, for strategy specification a, |tr(cr)| < |o'|'^ for 
some integer k. Consider the case where a = [ip —>■ a]\ Then, |tr(['0 — > a]*)| = 
5 -I- |Tr(-0)|. By the previous observation, we know that |Tr(-0)| < |0|' for some 
integer I. Therefore, 5 -I- |Tr(-0)| < \ip\'' for large enough integer k > I. Thus, 
tr(V' — > aY) < KV' — > a]*)|'° for some k. The cases for the ■ and -I- operations are 
obvious. This concludes the proof that the translation functions tr and Tr are 
polynomial-time. Therefore, the complexity of model checking for SL cannot be 
higher than PSPACE. 

Our second argument is a sketch of a direct reasoning. Similar to the argu- 
ments for the complexity of basic modal logic, we just need to check the branches 
of the tree model one by one using a depth- first search [7: . Now, fix a SL for- 
mula if and a model M. Since SL models are branching tree models, we can 
check M, branch by branch, one at a time without any need of considering the 
other branches. Namely, the procedure does not need to remember the previ- 
ous searches making it effective in the use of space. Moreover, the length of the 
branches in M is polynomial in |iy9| because of the construction of the SL model 
M, thus it shows that model checking for SL is in PSPACE. This concludes the 
proof that the complexity of the model checking problem for SL is in PSPACE. 

D 

Proof (Corollary [J\). We observed that the RSL formulas can be reduced to SL 
formulas. The reduction is clearly polynomial, as can be seen from the axioma- 
tization (See Section [3. 3|) . Therefore, we can translate any given RSL formula to 
a SL in a SL model, which in turn can be translated into a multi-modal CTL* 
formula and model. Then, by Theorem [51 we deduce that the complexity of the 
model checking problem for RSL is also PSPACE. D 



